Contoso Legal LLP
contoso.onmicrosoft.com
Changes in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log that are worth confirming with the client: domain sign-in (federation) changes, new app secrets and certificates, admin roles granted, and Conditional Access policies deleted or switched off. Failed attempts are left out.
| When (UTC) | Change | By | Target | Detail |
|---|---|---|---|---|
| 1 Sep 2026, 04:00 medium | Update conditional access policy | admin@contoso.example | Require MFA for all users | On → Off |
Why it matters: Conditional Access policy no longer enforced | ||||
| 9 Aug 2026, 04:00 medium | Add member to role | admin@contoso.example | bobby.marsh@contoso.example | Global Administrator |
Why it matters: Admin role granted | ||||
Every admin role, Conditional Access, policy, app, domain and account change in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log, newest first.
| When (UTC) | Area | Change | By | Target | Detail | Result | IP address |
|---|---|---|---|---|---|---|---|
| 4 Oct 2026, 04:00 | Apps | Update application – Certificates and secrets management | admin@contoso.example | Old Integration | Removed secret | Succeeded | 203.0.113.40 |
Everyone (and every app) that made one of the changes above, most active first.
| Who | Type | Changes | Last change (UTC) |
|---|---|---|---|
| admin@contoso.example | User | 18 | 10 Oct 2026, 16:00 |
| mallory.hart@contoso.example | User | 2 | 11 Oct 2026, 04:00 |
| Contoso Automation | App | 1 | 11 Oct 2026, 16:00 |
| Partner Center | App | 1 | 1 Oct 2026, 04:00 |
Data from Admin activity ().